Check-out/Check-in

Check-out and check-in refer to reserving, or locking, a privileged account for a user's exclusive usage for a finite period. Typically, a password rotation occurs upon check-in, releasing the exclusive lock. This process can happen:

• At the end of the checkout duration
• Manually
• When the session is closed in Remote Desktop Manager, configurable through a user preference option

With just-in-time (JIT) access, the group or role memberships of privileged accounts are modified upon check-out and restored to their initial state upon check-in.

Aliases

• CyberArk: Account retrieval

Related topics

• Approve access to a privileged account in Devolutions Hub Business
• Request access to a privileged account in Devolutions Hub Business
• Check-out requests report in Devolutions Hub Business

See also

• Privileged accounts (Devolutions Server)
• Privileged accounts (Devolutions Hub Business)
• Glossary of Common Privileged Access Management (PAM) Terms
• Need Cybersecurity Insurance? Then You Probably Need PAM, Too